last executing test programs: 5.461857067s ago: executing program 2 (id=457): openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r0, 0x0, 0x0) 5.225125691s ago: executing program 2 (id=458): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r0, &(0x7f0000003e80)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000b00)}], 0x2) 5.108789262s ago: executing program 2 (id=459): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f00000012c0)={0x280000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) 3.93177692s ago: executing program 2 (id=465): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18", 0x2}], 0x1}}], 0x1, 0x40091) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10001, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x123, 0x0, 0x0) 3.776114883s ago: executing program 2 (id=466): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0xfffffffffffffe00]}, 0x8, 0xc0800) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(0xffffffffffffffff, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x0, 0x1}, 0xc) ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0xe9) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000280)=""/40, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000200)={0x1, 0x0, {0x4, 0x46a, 0x1007, 0x1, 0x1, 0x3, 0x2, 0x3}}) pread64(0xffffffffffffffff, 0x0, 0x0, 0xc2a) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xffffffed]}, 0x0, 0x8) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x2000000, 0x12, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f0000001ac0)={r3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174ff10000000000000010e200", [0x0, 0x2]}}) 3.655337854s ago: executing program 3 (id=467): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r0, &(0x7f0000003e80)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000b00)}], 0x2) 3.457412308s ago: executing program 3 (id=468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r5, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r5, 0x5420, 0x0) ioctl$TCSETS(r5, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r4, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000100)={r8, 0x7fff}, 0xc) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 3.27801656s ago: executing program 0 (id=469): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3.171781682s ago: executing program 0 (id=470): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x161121) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) userfaultfd(0x80801) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x4, 0x5, 0x0, 0x400000000000, 0x80, 0x10000, 0xfffffffffffffffd}, 0x0, 0x0) 3.139193993s ago: executing program 0 (id=471): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x714}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'gretap0\x00', 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfc, 0x6a7, &(0x7f00000006c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x20}) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 2.760082338s ago: executing program 1 (id=473): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_clone3(&(0x7f00000012c0)={0x280000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) getsockopt$inet_buf(r0, 0x0, 0x20, 0x0, 0x0) 2.719817759s ago: executing program 0 (id=474): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18", 0x2}], 0x1}}], 0x1, 0x40091) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x10001, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x123, 0x0, 0x0) 2.507677622s ago: executing program 0 (id=475): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg0\x00'}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r4, 0x4008af60, &(0x7f0000000040)={@my=0x1}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000001500)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 2.409637164s ago: executing program 3 (id=476): r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/asound/card1/oss_mixer\x00', 0x242, 0x0) writev(r0, &(0x7f0000003e80)=[{&(0x7f0000000a80)="a080203e3f764f8a9aefd39cafdb26bffadae8105afd9db7fb281c375787c7506703ffe54f53e430e0d2af6e9f88a1d5d2fdad902cf70b315dce0d0c54c3d41e7907479bef309cd6705a1a41c2b5dbdbd66493db2006692ebf42f2520d453545ab0a176692d1553d", 0x68}, {&(0x7f0000000b00)="3bcab867990dafd48a38aa5c3e5078b40f", 0x11}], 0x2) 2.265370436s ago: executing program 3 (id=477): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000480)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r2 = syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0684113, &(0x7f0000000080)={0x1, 0xfffff800, 0x1, 0xa, 0x8, 0x3, 0x0, 0xe, 0x9, 0x40, 0xffffffff, 0x2}) 1.799716953s ago: executing program 1 (id=478): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.523376697s ago: executing program 1 (id=479): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x161121) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r1 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x4}) userfaultfd(0x80801) pselect6(0x40, &(0x7f0000000200)={0x0, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x4}, 0x0, &(0x7f0000000140)={0x1ff, 0x4, 0x5, 0x0, 0x400000000000, 0x80, 0x10000, 0xfffffffffffffffd}, 0x0, 0x0) 1.31715628s ago: executing program 3 (id=480): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x7fff}, 0xc) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r5, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r5, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 1.267778971s ago: executing program 1 (id=481): timerfd_create(0x4, 0x80800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r4, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) 321.807146ms ago: executing program 1 (id=482): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) socket$vsock_stream(0x28, 0x1, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) pselect6(0x40, &(0x7f00000000c0)={0x6, 0xfffffffffffffffd, 0x9, 0x40, 0x2, 0xd}, 0x0, &(0x7f0000000680)={0x7ff, 0x7, 0x5, 0x7, 0xffffffffffffff22, 0x2, 0x5, 0x8}, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 102.646099ms ago: executing program 3 (id=483): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$eJzs3V1oXOl5B/DnnSOtRto00WYTb9Jm04GUxCi18VdsBZcgZxW1AccbIit0r6LRh51h5ZGR5MabtkFtSQu9Cd2b0psimi4t5KJX3V5WabaQUAol5CK9KAiaLHvRC10ECi0bhXPmHWlky7ayXlvS7u+3zP7PnHnO+P0YnzkCvzoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAER89nOXTp1OB90KAOBxujL5pVNnff8DwLvKVT//AwAAAAAAAAAAAADAYZeiiGORYujVzTRdPe+oX261b92eGp/Y+7DBFClqUVT15aN++szZc586f2G0m/c//u324Xh+8uqlxnOLN24uzS8vz881ptqt2cW5+X2/w8Mef6eRagAaN168NXft2nLjzMmzu16+Pfz6wJPHhi9eOHF+tFs7NT4xMdlT09f/lv/0u9xrhccTUUQzUrw5/EZqRkQtHn4sHvDZedQGq06MVJ2YGp+oOrLQarZXyhdTLVfVIho9B411x+gxzMVDGYtYLZtfNnik7N7kzeZSc2ZhvvHF5tJKa6W12E61TmvL/jSiFqMpYi0iNgbufrv+KOKjkeLlU5tpJiKK7jh8sloY/OD21B5BH/ehbGejP2KtdgTm7BAbiCKuRIqfvXY8Zssxy4/4eMQXynw14pUyPxORyg/GuYif7vE54mjqiyL+PVIsps00V50PuueVy19ufL59bbGntnteOfLfD4/TIT831aOImeqMv5ne+sUOAAAAAAAAAAAAAAAAAG+3wSji25HiT579vWpdcVTr0t93cfQ9L/x275rxZx7wPmXtyYhYre1vTW5/XjqcauV/j6Bj7Es9ivhGXv/3RwfdGAAAAAAAAAAAAAAAAAAAgHe1Il6IFF85cTytRe89xVvt642rzZmFzl1hu/f+7d4zfWtra6uROjmWczrnas61nOs5N3JGLR+fcyzndM7VnGs513Nu5IwiH59zLOd0ztWcaznXc27kjL58fM6xnNM5V3Ou5VzPuZEzDsm9ewEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3klqUcTPI8W3vraZIkXEWMR0dHJ94KBbBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACU6qmIk5Fi/YV69XytFnE1In6+tbXVfUTEZpkP66D7CgAAAAAAAAAAAAAAAAAAAIdWKuJjkeLp/9tMjYi4Pfz6wJPHhi9eOHF+tIgiUlnSW//85NVLjecWb9xcml9enp9rTLVbs4tz8/v94+qXW+1bt6fGJx5JZx5o8BG3f7D+3OLNl5Za17+6sufrQ/VLM8srS83ZvV+OwahFTPfuGakaPDU+UTV6odVsV4em2j0aWIsY229nAAAAAAAAAAAAAAAAAAAAODSGUhGfixQ/+a9zqbtuvK+z5v9XOs+K7dpX/mDndwEs3JFdvb8/YD/bab8NHakW3jemxicmJnt29/XfXVq2KaUinokUn3j5Q9V6+BRDe66NL+veW9bdOJfrhn+trFvdVVUfmRqfaFxZbJ+4tLCwONtcac4szDcmbzZn9/2LAwAAAAAAAAAAAAAAAAAAAOA+hlIRP4oU//P3/5G6953P6//7Os961v//VrWEvlJPu3Nbtbb/vdXa/s72+y6ODn302XvtfxTr/8s2pVTENyPF2R99qLqffnf9//QdtWXdn0WKN579SK6rPVHWNbvd6bzjtdbC/Kmy9q8jxa+/2a2NqvZ6rn16p/Z0WTsYKf5yc3ftV3PtB3Zqz5S1xyPF9/5779oP7tSeLWt/Ein+6e8a3dqhsvb3c+2xndqTs4sLcw8a1nL+vxMp/vbK76Run+85/z2//2H1jtx215zff/vtmv/hnn2reV7/NM9/8wHzfz5SfKf+kVzXGfuZ/PpT1f935v8TkeI//2137bVc+/6d2tP77dZBK+f/25Hiu3/14+0+5/nPI7szQ73z/6t9u3P7U3JA8/9Uz77h3K7ZX3Is3o2WX/r6i82FhfklGzZs2NjeOOgzE49D+f3/55Hi/48VqXsdk7//39N5tnP997/f2Pn+v3hHbjug7//39+y7mK9a+vsi6is3bvY/E1FffunrJ1o3mtfnr8+3z5w+9elPnz996vT5/ie6F3c7W/seu3eCcv5/ECl++A8/3P45Zvf1397X/0N35LYDmv+ne/u067pm30PxrlTO/99Eiqc+++Ptnzfvd/3f/fn/+Md25/bfvwOa/w/07BvO7Wr9kmMBAAAAAAAAAABwlAylIv4iUvzuH/9m6q4h2s+//5u7I7cd0L//Otazb+4xrWvY9yADABwi5fXfByPFP299f3st9+7rv/iNbm3v9d+9HIb7/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFGXoog/jBRDr26m9YHyeUf9cqt96/bU+MTehw2mSFGLoqovH/XTZ86e+9T5C6PdvP/xb7cPx/OTVy81nlu8cXNpfnl5fq4x1W7NLs7N7/sdHvb4O41UA9C48eKtuWvXlhtnTp7d9fLt4dcHnjw2fPHCifOj3dqp8YmJyZ6avv63/KffJd1j/xNRxPcjxZvDb6TvDkTU4uHH4gGfnUdtsOrESNWJqfGJqiMLrWZ7pXwx1XJVLaLRc9BYd4wew1w8lLGI1bL5ZYNHyu5N3mwuNWcW5htfbC6ttFZai+1U67S27E8jajGaItYiYmPg7rfrjyK+GSlePrWZ/mUgouiOwyevTH7p1NkHt6f2CPq4D2U7G/0Ra7UjMGeH2EAU8Y+R4mevHY/vDUT0RecRH4/4QpmvRrxS5mciUvnBOBfx0z0+RxxNfVHEuUixmDbTawPl+aB7Xrn85cbn29cWe2q755Uj//3wOB3yc1M9ivhBdcbfTP/q7zUAAAAAAAAAAAAAAADAIVLEWqT4yonjqVofvL2muNW+3rjanFnoLOvrrv3rrpne2traaqROjuWczrmacy3nes6NnFHLx+ccyzmdczXnWs71nBs5o8jH5xzLOZ1zNedazvWcGzmjLx+fcyzndM7VnGs513Nu5IxDsnYPAAAAAAAAAAAAAAAAAAB4Z6lFUd3F/Vtf20xbA537S09HJ9fdD/Qd7xcBAAD//0kCdPc=") syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0xc0ed4040, &(0x7f00000000c0)={[{@noblock_validity}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@journal_dev={'journal_dev', 0x3d, 0x714}}, {@grpid}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@jqfmt_vfsv1}]}, 0xf5, 0x47a, &(0x7f0000000ac0)="$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") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000000)={'gretap0\x00', 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000004c0)='./file1\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfc, 0x6a7, &(0x7f00000006c0)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f0000000140)={0x20}) socket$kcm(0x10, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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") r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r6, &(0x7f00000000c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 64.06492ms ago: executing program 2 (id=484): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18", 0x2}], 0x1}}], 0x1, 0x40091) recvfrom$inet(r0, 0x0, 0x0, 0x10001, &(0x7f00000000c0)={0x2, 0x4e22, @local}, 0x10) recvfrom$inet(r0, 0x0, 0x0, 0x123, 0x0, 0x0) 55.97752ms ago: executing program 0 (id=485): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fanotify_init(0x10, 0x400) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_netdev_private(r1, 0x89f8, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x200880, 0x0) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x9, 0x3ff, 0xfffffffb, 0x8001, 0x1a, "08400000c38eaad6a4540ad9455fb5031af800"}) ioctl$TIOCPKT(r4, 0x5420, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000480)={0x408, 0x3, 0x0, 0xfffc, 0x1a, "4415264a100046001113fb235902af2556c6b6"}) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) r5 = socket(0x2, 0x80805, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000100)={r7, 0x7fff}, 0xc) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r8, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @default}, 0x1c) connect$rose(r8, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@null, @null, @null, @default, @bcast, @default]}, 0x40) 0s ago: executing program 1 (id=486): socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4000800) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb93, &(0x7f00000017c0)="$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") lseek(r3, 0x7f, 0x2) getdents64(r3, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x4c, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @auth={{{0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x3}, @broadcast, @device_a, @initial, {0x7, 0xf95}, @value=@ver_80211n={0x0, 0x59cf, 0x0, 0x1, 0x0, 0x3, 0x1}}, 0x1, 0x3, 0x25c, @void}}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.250' (ED25519) to the list of known hosts. [ 60.947308][ T5773] cgroup: Unknown subsys name 'net' [ 61.118411][ T5773] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 62.480458][ T5773] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.480707][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.489681][ T5788] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.495258][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.505455][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.506624][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.512961][ T5793] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.522068][ T5798] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.527270][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.535524][ T5798] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.541542][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.548538][ T5798] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 64.555322][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 64.562241][ T5798] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.568895][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.575910][ T5798] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.591231][ T5793] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.592846][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.611188][ T5796] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.619301][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.627281][ T5796] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 64.640062][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.647909][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.653350][ T5796] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 64.662708][ T5796] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 65.017912][ T5783] chnl_net:caif_netlink_parms(): no params data found [ 65.109043][ T5787] chnl_net:caif_netlink_parms(): no params data found [ 65.206412][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.213731][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.220973][ T5783] bridge_slave_0: entered allmulticast mode [ 65.228430][ T5783] bridge_slave_0: entered promiscuous mode [ 65.248198][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 65.275433][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.282539][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.289606][ T5783] bridge_slave_1: entered allmulticast mode [ 65.297266][ T5783] bridge_slave_1: entered promiscuous mode [ 65.345515][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.352699][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.359890][ T5787] bridge_slave_0: entered allmulticast mode [ 65.366851][ T5787] bridge_slave_0: entered promiscuous mode [ 65.374970][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.385736][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.393275][ T5787] bridge_slave_1: entered allmulticast mode [ 65.400428][ T5787] bridge_slave_1: entered promiscuous mode [ 65.455759][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.466656][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.476031][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 65.497145][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.509038][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.551476][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.558689][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.566740][ T5789] bridge_slave_0: entered allmulticast mode [ 65.573697][ T5789] bridge_slave_0: entered promiscuous mode [ 65.613439][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.620534][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.627961][ T5789] bridge_slave_1: entered allmulticast mode [ 65.635244][ T5789] bridge_slave_1: entered promiscuous mode [ 65.653500][ T5783] team0: Port device team_slave_0 added [ 65.662561][ T5787] team0: Port device team_slave_0 added [ 65.682309][ T5787] team0: Port device team_slave_1 added [ 65.696655][ T5783] team0: Port device team_slave_1 added [ 65.757641][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.769961][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.779812][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.786971][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.812903][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.826082][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.833068][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.859096][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.870973][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.877940][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.904051][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.952756][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.959769][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.985834][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.997173][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.004537][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.011626][ T5784] bridge_slave_0: entered allmulticast mode [ 66.018546][ T5784] bridge_slave_0: entered promiscuous mode [ 66.026290][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.033631][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.040732][ T5784] bridge_slave_1: entered allmulticast mode [ 66.047534][ T5784] bridge_slave_1: entered promiscuous mode [ 66.063293][ T5789] team0: Port device team_slave_0 added [ 66.074848][ T5789] team0: Port device team_slave_1 added [ 66.132976][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.146519][ T5787] hsr_slave_0: entered promiscuous mode [ 66.153661][ T5787] hsr_slave_1: entered promiscuous mode [ 66.179431][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.208511][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.216354][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.242738][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.255698][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.263193][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.289480][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.326063][ T5784] team0: Port device team_slave_0 added [ 66.340375][ T5783] hsr_slave_0: entered promiscuous mode [ 66.348608][ T5783] hsr_slave_1: entered promiscuous mode [ 66.354894][ T5783] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.362820][ T5783] Cannot create hsr debugfs directory [ 66.374740][ T5784] team0: Port device team_slave_1 added [ 66.436862][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.443875][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.470668][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.502410][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.509348][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 66.535525][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.574973][ T5789] hsr_slave_0: entered promiscuous mode [ 66.581212][ T5789] hsr_slave_1: entered promiscuous mode [ 66.587418][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.595497][ T5789] Cannot create hsr debugfs directory [ 66.662587][ T5796] Bluetooth: hci1: command tx timeout [ 66.662600][ T5101] Bluetooth: hci3: command tx timeout [ 66.668262][ T5791] Bluetooth: hci0: command tx timeout [ 66.719020][ T5784] hsr_slave_0: entered promiscuous mode [ 66.725220][ T5784] hsr_slave_1: entered promiscuous mode [ 66.731237][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.739289][ T5784] Cannot create hsr debugfs directory [ 66.752001][ T5791] Bluetooth: hci2: command tx timeout [ 66.954697][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.971571][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.985867][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.996938][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.054598][ T5783] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 67.067974][ T5783] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 67.077556][ T5783] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 67.098106][ T5783] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 67.176521][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 67.186888][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 67.198260][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 67.237762][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 67.290771][ T5784] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 67.300266][ T5784] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 67.310900][ T5784] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 67.332721][ T5784] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 67.370661][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.434437][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.462865][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.480700][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.500920][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.508214][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.528783][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.535876][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.557529][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.564668][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.589599][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.596974][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.649860][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.717762][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.757665][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.774166][ T3454] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.781370][ T3454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.828179][ T3454] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.835342][ T3454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.861677][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.905381][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.912531][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.936300][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.954447][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.961757][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.129063][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.148805][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.256533][ T5787] veth0_vlan: entered promiscuous mode [ 68.287998][ T5783] veth0_vlan: entered promiscuous mode [ 68.317160][ T5787] veth1_vlan: entered promiscuous mode [ 68.365583][ T5783] veth1_vlan: entered promiscuous mode [ 68.395337][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.414851][ T5787] veth0_macvtap: entered promiscuous mode [ 68.435655][ T5787] veth1_macvtap: entered promiscuous mode [ 68.476934][ T5783] veth0_macvtap: entered promiscuous mode [ 68.494988][ T5783] veth1_macvtap: entered promiscuous mode [ 68.516703][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.543630][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.554209][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.569638][ T5789] veth0_vlan: entered promiscuous mode [ 68.580010][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.593288][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.605646][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.615929][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.626308][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.635333][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.646095][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.685630][ T5789] veth1_vlan: entered promiscuous mode [ 68.697362][ T5783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.709251][ T5783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.721231][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.742544][ T5791] Bluetooth: hci3: command tx timeout [ 68.742671][ T5101] Bluetooth: hci0: command tx timeout [ 68.747935][ T5796] Bluetooth: hci1: command tx timeout [ 68.764258][ T5783] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.773120][ T5783] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.782493][ T5783] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.791189][ T5783] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.823692][ T5796] Bluetooth: hci2: command tx timeout [ 68.879364][ T5784] veth0_vlan: entered promiscuous mode [ 68.908713][ T1290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.921113][ T1290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.945025][ T5789] veth0_macvtap: entered promiscuous mode [ 68.974653][ T5789] veth1_macvtap: entered promiscuous mode [ 68.985056][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.993576][ T5784] veth1_vlan: entered promiscuous mode [ 69.000921][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.057608][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.069969][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.089880][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.100388][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.112552][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.141702][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.154473][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.164747][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.175422][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.186590][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.198380][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.209020][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.218506][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.227824][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.346990][ T5784] veth0_macvtap: entered promiscuous mode [ 69.353532][ T1290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.365740][ T1290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.374368][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.384716][ T5784] veth1_macvtap: entered promiscuous mode [ 69.413859][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.420863][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.434499][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.444676][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.455854][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.466653][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.477831][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.489794][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.507504][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.529513][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.539841][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.551522][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.562739][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.573203][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.587221][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.602340][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.615228][ T5784] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.629705][ T5784] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.638855][ T5784] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.647561][ T5784] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.802173][ T5825] usb 2-1: Using ep0 maxpacket: 16 [ 69.814340][ T5825] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 69.823765][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 69.831843][ T5825] usb 2-1: Product: syz [ 69.841755][ T5825] usb 2-1: Manufacturer: syz [ 69.846668][ T5825] usb 2-1: SerialNumber: syz [ 69.865166][ T5825] usb 2-1: config 0 descriptor?? [ 69.929535][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.963767][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.193278][ T5840] usb 2-1: USB disconnect, device number 2 [ 70.350035][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.361815][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.383015][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.390933][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.449550][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.458406][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.551524][ T5883] syz.2.3[5883]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 70.583684][ T5883] loop2: detected capacity change from 0 to 16 [ 70.603263][ T5883] erofs: Unknown parameter 'vΡe1' [ 70.823262][ T5796] Bluetooth: hci0: command tx timeout [ 70.828740][ T5796] Bluetooth: hci1: command tx timeout [ 70.834513][ T5796] Bluetooth: hci3: command tx timeout [ 70.911744][ T5101] Bluetooth: hci2: command tx timeout [ 71.536108][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.560862][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.221856][ T5905] loop1: detected capacity change from 0 to 2048 [ 72.295046][ T5905] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 72.372585][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.380868][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.389865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.398476][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.412137][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 72.582669][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 72.627220][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 72.658961][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 72.667939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 72.822447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 73.018208][ T5101] Bluetooth: hci3: command tx timeout [ 73.028377][ T5101] Bluetooth: hci1: command tx timeout [ 73.035826][ T5791] Bluetooth: hci2: command tx timeout [ 73.041419][ T5796] Bluetooth: hci0: command tx timeout [ 73.333337][ T5914] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11'. [ 73.338820][ T5912] Zero length message leads to an empty skb [ 74.781413][ T5939] loop2: detected capacity change from 0 to 2048 [ 74.836328][ T5939] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 75.317041][ T28] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 75.636021][ T28] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 75.644673][ T28] usb 1-1: config 0 has no interface number 0 [ 75.650792][ T28] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 75.709309][ T28] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 75.738022][ T28] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 75.751737][ T28] usb 1-1: config 0 interface 20 has no altsetting 0 [ 75.761675][ T28] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 75.775004][ T28] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.788018][ T28] usb 1-1: Product: syz [ 75.792294][ T28] usb 1-1: Manufacturer: syz [ 75.796962][ T28] usb 1-1: SerialNumber: syz [ 75.813588][ T28] usb 1-1: config 0 descriptor?? [ 75.837670][ T5941] loop1: detected capacity change from 0 to 32768 [ 75.858440][ T5941] ======================================================= [ 75.858440][ T5941] WARNING: The mand mount option has been deprecated and [ 75.858440][ T5941] and is ignored by this kernel. Remove the mand [ 75.858440][ T5941] option from the mount to silence this warning. [ 75.858440][ T5941] ======================================================= [ 75.914856][ T5941] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 75.984994][ T5941] XFS (loop1): Ending clean mount [ 76.002725][ T5941] XFS (loop1): Quotacheck needed: Please wait. [ 76.033543][ T28] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 76.056099][ T28] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 76.064347][ T28] keyspan 1-1:0.20: unsupported endpoint type 0 [ 76.074126][ T5941] XFS (loop1): Quotacheck: Done. [ 76.074599][ T28] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 76.100569][ T28] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 76.109416][ T28] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 76.117528][ T28] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 76.125630][ T28] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 76.145101][ T28] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 76.168639][ T28] usb 1-1: USB disconnect, device number 2 [ 76.214210][ T28] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 76.240212][ T28] keyspan 1-1:0.20: device disconnected [ 76.278887][ T5787] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 76.790335][ T5962] loop2: detected capacity change from 0 to 32768 [ 78.268634][ T5978] loop3: detected capacity change from 0 to 2048 [ 78.333633][ T5978] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 78.370041][ T5980] loop0: detected capacity change from 0 to 2048 [ 78.447133][ T5980] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 79.476141][ T5993] loop2: detected capacity change from 0 to 16 [ 79.484039][ T5993] erofs: Unknown parameter 'vΡe1' [ 79.529390][ T5794] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 79.680982][ T5993] loop2: detected capacity change from 0 to 4096 [ 79.759853][ T5993] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.30: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 79.934327][ T5993] EXT4-fs (loop2): get root inode failed [ 79.998420][ T5993] EXT4-fs (loop2): mount failed [ 80.580222][ C1] Unknown status report in ack skb [ 81.194033][ T6013] loop2: detected capacity change from 0 to 2048 [ 81.204335][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.44'. [ 81.763124][ T6013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 81.946348][ T9] cfg80211: failed to load regulatory.db [ 82.361556][ T6024] loop3: detected capacity change from 0 to 2048 [ 82.400836][ T6024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 83.042096][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 83.253623][ T9] usb 2-1: config 0 has an invalid interface number: 20 but max is 0 [ 83.359797][ T9] usb 2-1: config 0 has no interface number 0 [ 83.369695][ T9] usb 2-1: config 0 interface 20 has no altsetting 0 [ 83.379306][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 83.389650][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.401930][ T9] usb 2-1: Product: syz [ 83.406140][ T9] usb 2-1: Manufacturer: syz [ 83.411585][ T9] usb 2-1: SerialNumber: syz [ 83.419599][ T9] usb 2-1: config 0 descriptor?? [ 83.506210][ T6037] loop2: detected capacity change from 0 to 4096 [ 83.549879][ T6037] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.49: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 83.603836][ T6037] EXT4-fs (loop2): get root inode failed [ 83.644811][ T9] keyspan 2-1:0.20: Keyspan 1 port adapter converter detected [ 83.659625][ T6037] EXT4-fs (loop2): mount failed [ 83.685710][ T9] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 87 [ 83.734242][ C1] Unknown status report in ack skb [ 83.742506][ T9] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 7 [ 83.767615][ T9] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 81 [ 83.784488][ T9] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 1 [ 83.804944][ T9] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 2 [ 83.815177][ T9] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 85 [ 83.829575][ T9] keyspan 2-1:0.20: found no endpoint descriptor for endpoint 5 [ 83.839606][ T9] usb 2-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 83.855574][ T9] usb 2-1: USB disconnect, device number 3 [ 84.021080][ T9] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 84.114025][ T9] keyspan 2-1:0.20: device disconnected [ 84.131707][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.52'. [ 85.254437][ T786] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.263924][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.0.55'. [ 85.298796][ T6060] loop3: detected capacity change from 0 to 2048 [ 85.330104][ T6060] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 85.917206][ T786] usb 3-1: config 0 has no interfaces? [ 85.937219][ T786] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 86.021022][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.117529][ T786] usb 3-1: Product: syz [ 86.154324][ T786] usb 3-1: Manufacturer: syz [ 86.176048][ T786] usb 3-1: SerialNumber: syz [ 86.307016][ T786] usb 3-1: config 0 descriptor?? [ 86.352269][ T6070] loop1: detected capacity change from 0 to 16 [ 86.365490][ T6070] erofs: Unknown parameter 'vΡe1' [ 86.471830][ T6070] loop1: detected capacity change from 0 to 4096 [ 86.500716][ T6070] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.58: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 86.665446][ T6070] EXT4-fs (loop1): get root inode failed [ 86.671108][ T6070] EXT4-fs (loop1): mount failed [ 86.702187][ T6073] loop3: detected capacity change from 0 to 2048 [ 86.795028][ T6073] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 86.885295][ T6075] loop0: detected capacity change from 0 to 4096 [ 86.916160][ T6075] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.60: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 87.266599][ T6075] EXT4-fs (loop0): get root inode failed [ 87.349953][ T6075] EXT4-fs (loop0): mount failed [ 88.576865][ T6083] loop1: detected capacity change from 0 to 32768 [ 89.377739][ T8] usb 3-1: USB disconnect, device number 2 [ 90.228985][ T6101] netlink: 52 bytes leftover after parsing attributes in process `syz.0.67'. [ 90.252836][ T6101] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.261122][ T6101] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.513869][ T6109] loop0: detected capacity change from 0 to 16 [ 90.521095][ T6109] erofs: Unknown parameter 'vΡe1' [ 90.661333][ T6109] loop0: detected capacity change from 0 to 4096 [ 90.691579][ T6109] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.70: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 90.714101][ T6109] EXT4-fs (loop0): get root inode failed [ 90.722029][ T6109] EXT4-fs (loop0): mount failed [ 92.444861][ T6135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.75'. [ 93.331975][ T5897] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 94.286392][ T5897] usb 2-1: config 0 has no interfaces? [ 94.318195][ T5897] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 94.351550][ T5897] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.378807][ T5897] usb 2-1: Product: syz [ 94.400632][ T5897] usb 2-1: Manufacturer: syz [ 94.409296][ T5897] usb 2-1: SerialNumber: syz [ 94.422377][ T5897] usb 2-1: config 0 descriptor?? [ 94.481708][ T6147] loop3: detected capacity change from 0 to 2048 [ 94.524743][ T6147] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 96.602338][ T5853] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 97.450861][ T5853] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 97.478416][ T5853] usb 1-1: config 0 has no interface number 0 [ 97.507338][ T5853] usb 1-1: config 0 interface 20 has no altsetting 0 [ 97.516328][ T9] usb 2-1: USB disconnect, device number 4 [ 97.535584][ T5853] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 97.574525][ T5853] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.592545][ T5853] usb 1-1: Product: syz [ 97.608508][ T5853] usb 1-1: Manufacturer: syz [ 97.628094][ T5853] usb 1-1: SerialNumber: syz [ 97.707393][ T5853] usb 1-1: config 0 descriptor?? [ 98.123770][ T5853] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 98.276712][ T5853] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 98.397460][ T5853] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 7 [ 98.450763][ T5853] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 98.470689][ T6177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.91'. [ 98.490293][ T5853] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 98.509363][ T5853] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 98.567302][ T5853] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 98.575859][ T6180] loop1: detected capacity change from 0 to 2048 [ 98.617424][ T5853] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 98.629778][ T6180] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 98.662492][ T5853] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 98.705873][ T5853] usb 1-1: USB disconnect, device number 3 [ 98.859545][ T5853] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 99.483932][ T5853] keyspan 1-1:0.20: device disconnected [ 99.771971][ T28] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.194307][ T28] usb 3-1: config 0 has no interfaces? [ 100.206426][ T28] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 100.215969][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.230307][ T28] usb 3-1: Product: syz [ 100.247730][ T28] usb 3-1: Manufacturer: syz [ 100.282166][ T28] usb 3-1: SerialNumber: syz [ 100.364228][ T28] usb 3-1: config 0 descriptor?? [ 100.421331][ T27] audit: type=1326 audit(1752030866.631:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f934a72ab19 code=0x7ffc0000 [ 101.054410][ T27] audit: type=1326 audit(1752030866.631:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a78e929 code=0x7ffc0000 [ 101.104250][ T27] audit: type=1326 audit(1752030866.631:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f934a72ab19 code=0x7ffc0000 [ 101.166756][ T27] audit: type=1326 audit(1752030866.631:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a78e929 code=0x7ffc0000 [ 101.208251][ T6186] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 101.373788][ T27] audit: type=1326 audit(1752030866.671:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a78e929 code=0x7ffc0000 [ 101.443679][ T27] audit: type=1326 audit(1752030866.671:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a78e929 code=0x7ffc0000 [ 101.472377][ T27] audit: type=1326 audit(1752030866.671:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a78e929 code=0x7ffc0000 [ 101.495067][ T27] audit: type=1326 audit(1752030866.671:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a78e929 code=0x7ffc0000 [ 101.517637][ T27] audit: type=1326 audit(1752030866.671:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f934a78e929 code=0x7ffc0000 [ 101.661952][ T27] audit: type=1326 audit(1752030866.671:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6194 comm="syz.1.95" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f934a72ab19 code=0x7ffc0000 [ 102.462706][ T6220] loop0: detected capacity change from 0 to 128 [ 103.474430][ T28] usb 3-1: USB disconnect, device number 3 [ 103.648615][ T6233] vivid-004: ================= START STATUS ================= [ 103.682640][ T6233] vivid-004: Radio HW Seek Mode: Bounded [ 103.768444][ T6233] vivid-004: Radio Programmable HW Seek: false [ 103.778464][ T6233] vivid-004: RDS Rx I/O Mode: Block I/O [ 103.822906][ T6233] vivid-004: Generate RBDS Instead of RDS: false [ 103.848655][ T6233] vivid-004: RDS Reception: true [ 103.853954][ T6233] vivid-004: RDS Program Type: 0 inactive [ 103.859741][ T6233] vivid-004: RDS PS Name: inactive [ 103.865273][ T6233] vivid-004: RDS Radio Text: inactive [ 103.871009][ T6233] vivid-004: RDS Traffic Announcement: false inactive [ 103.878026][ T6233] vivid-004: RDS Traffic Program: false inactive [ 103.932546][ T6233] vivid-004: RDS Music: false inactive [ 103.938158][ T6233] vivid-004: ================== END STATUS ================== [ 104.499021][ T6019] kworker/u4:9: attempt to access beyond end of device [ 104.499021][ T6019] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 105.212958][ T785] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 105.284740][ T6254] loop3: detected capacity change from 0 to 2048 [ 105.492503][ T785] usb 1-1: Using ep0 maxpacket: 32 [ 105.501907][ T6254] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.594491][ T785] usb 1-1: config 1 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 105.610493][ T6259] tipc: Started in network mode [ 105.615655][ T6259] tipc: Node identity 82f5d8c77c19, cluster identity 4711 [ 105.623671][ T6259] tipc: Enabled bearer , priority 0 [ 105.635004][ T6259] syzkaller0: entered promiscuous mode [ 105.640589][ T6259] syzkaller0: entered allmulticast mode [ 105.663276][ T785] usb 1-1: config 1 interface 0 has no altsetting 0 [ 105.699265][ T6259] tipc: Resetting bearer [ 105.713579][ T6258] tipc: Resetting bearer [ 105.735289][ T785] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.40 [ 105.752843][ T785] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.781702][ T6258] tipc: Disabling bearer [ 105.793495][ T785] usb 1-1: Product: syz [ 105.800402][ T785] usb 1-1: Manufacturer: syz [ 105.833846][ T785] usb 1-1: SerialNumber: syz [ 106.805751][ T785] usbhid 1-1:1.0: can't add hid device: -71 [ 106.811777][ T785] usbhid: probe of 1-1:1.0 failed with error -71 [ 106.895597][ T785] usb 1-1: USB disconnect, device number 4 [ 106.983848][ T6272] loop3: detected capacity change from 0 to 128 [ 108.536741][ T58] kworker/u4:4: attempt to access beyond end of device [ 108.536741][ T58] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 109.769490][ T6293] syz.3.122 (6293) used greatest stack depth: 20944 bytes left [ 110.889804][ T6311] loop0: detected capacity change from 0 to 4096 [ 110.929820][ T6311] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #2: comm syz.0.127: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 110.952646][ T6311] EXT4-fs (loop0): get root inode failed [ 110.959791][ T6311] EXT4-fs (loop0): mount failed [ 111.290746][ T6320] loop2: detected capacity change from 0 to 16 [ 111.358531][ T6320] erofs: Unknown parameter 'vΡe1' [ 111.629776][ T6320] loop2: detected capacity change from 0 to 4096 [ 111.679167][ T6320] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.130: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 111.745609][ T6320] EXT4-fs (loop2): get root inode failed [ 111.790694][ T6320] EXT4-fs (loop2): mount failed [ 112.305330][ T6327] loop1: detected capacity change from 0 to 2048 [ 112.336558][ T6327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 113.476753][ T8] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 113.713910][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 113.731906][ T8] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 113.746975][ T8] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 113.885689][ T6350] loop3: detected capacity change from 0 to 32768 [ 113.897324][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.393654][ T8] usb 1-1: Product: syz [ 114.398719][ T8] usb 1-1: Manufacturer: syz [ 114.424654][ T8] usb 1-1: SerialNumber: syz [ 114.443341][ T8] usb 1-1: config 0 descriptor?? [ 114.451987][ T6339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.459475][ T6339] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.531472][ T8] usb 1-1: ucan: probing device on interface #0 [ 114.549143][ T8] usb 1-1: ucan: invalid EP count (1) [ 114.558339][ T8] usb 1-1: ucan: probe failed; try to update the device firmware [ 116.595856][ T6367] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 116.688608][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.143'. [ 117.157475][ T6373] loop1: detected capacity change from 0 to 2048 [ 117.197583][ T6373] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 117.998166][ T8] usb 1-1: USB disconnect, device number 5 [ 118.049528][ T6375] pim6reg: entered allmulticast mode [ 118.622365][ T6398] netlink: 4 bytes leftover after parsing attributes in process `syz.1.149'. [ 118.765631][ T6401] netlink: 40 bytes leftover after parsing attributes in process `syz.2.154'. [ 118.812366][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 118.812377][ T27] audit: type=1326 audit(1752030885.021:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8249d8e929 code=0x7ffc0000 [ 118.872041][ T27] audit: type=1326 audit(1752030885.021:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8249d8e929 code=0x7ffc0000 [ 118.894309][ T27] audit: type=1326 audit(1752030885.021:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8249d8e929 code=0x7ffc0000 [ 118.916711][ T27] audit: type=1326 audit(1752030885.021:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8249d2ab19 code=0x7ffc0000 [ 118.947766][ T27] audit: type=1326 audit(1752030885.031:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8249d8e929 code=0x7ffc0000 [ 119.018819][ T6399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.151'. [ 119.029325][ T27] audit: type=1326 audit(1752030885.031:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8249d2ab19 code=0x7ffc0000 [ 119.088776][ T27] audit: type=1326 audit(1752030885.031:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8249d2ab19 code=0x7ffc0000 [ 119.137145][ T27] audit: type=1326 audit(1752030885.031:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8249d2ab19 code=0x7ffc0000 [ 119.188371][ T27] audit: type=1326 audit(1752030885.031:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8249d2ab19 code=0x7ffc0000 [ 119.215843][ T27] audit: type=1326 audit(1752030885.031:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6403 comm="syz.3.153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8249d2ab19 code=0x7ffc0000 [ 119.497830][ T6411] loop2: detected capacity change from 0 to 4096 [ 119.577342][ T6411] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.156: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 119.639643][ T6411] EXT4-fs (loop2): get root inode failed [ 119.648758][ T6411] EXT4-fs (loop2): mount failed [ 119.819209][ T6418] loop2: detected capacity change from 0 to 2048 [ 119.857772][ T6418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.431957][ T786] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 122.653671][ T786] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 122.671795][ T786] usb 1-1: config 0 has no interface number 0 [ 122.718007][ T786] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 122.751143][ T786] usb 1-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 122.775212][ T786] usb 1-1: config 0 interface 20 has no altsetting 0 [ 122.795592][ T786] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 122.804952][ T786] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.838018][ T786] usb 1-1: Product: syz [ 122.855674][ T786] usb 1-1: Manufacturer: syz [ 122.860290][ T786] usb 1-1: SerialNumber: syz [ 122.886748][ T786] usb 1-1: config 0 descriptor?? [ 123.121402][ T786] keyspan 1-1:0.20: Keyspan 1 port adapter converter detected [ 123.159633][ T786] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 87 [ 123.181934][ T786] keyspan 1-1:0.20: unsupported endpoint type 0 [ 123.199530][ T786] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 81 [ 123.246098][ T786] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 1 [ 123.290548][ T786] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 2 [ 123.308608][ T786] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 85 [ 123.321974][ T786] keyspan 1-1:0.20: found no endpoint descriptor for endpoint 5 [ 123.349848][ T786] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 123.447718][ T786] usb 1-1: USB disconnect, device number 6 [ 123.495607][ T786] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 123.524967][ T786] keyspan 1-1:0.20: device disconnected [ 123.864192][ T6452] netlink: 32 bytes leftover after parsing attributes in process `syz.0.169'. [ 124.060250][ T6458] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 124.371975][ T786] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.564204][ T786] usb 4-1: config 0 has no interfaces? [ 124.601995][ T786] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 124.631410][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.641901][ T786] usb 4-1: Product: syz [ 124.646082][ T786] usb 4-1: Manufacturer: syz [ 124.670826][ T786] usb 4-1: SerialNumber: syz [ 124.697758][ T786] usb 4-1: config 0 descriptor?? [ 124.756142][ T6469] loop0: detected capacity change from 0 to 2048 [ 124.814366][ T6469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 127.151333][ T785] usb 4-1: USB disconnect, device number 2 [ 127.438987][ T6502] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.448124][ T6502] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.550125][ T6504] tipc: Started in network mode [ 127.560131][ T6504] tipc: Node identity 5e56b7b5bb16, cluster identity 4711 [ 127.580951][ T6504] tipc: Enabled bearer , priority 0 [ 127.600718][ T6504] syzkaller0: entered promiscuous mode [ 127.614412][ T6504] syzkaller0: entered allmulticast mode [ 127.667915][ T6504] tipc: Resetting bearer [ 127.689068][ T6503] tipc: Resetting bearer [ 127.718377][ T6503] tipc: Disabling bearer [ 128.061930][ T785] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.117344][ T6510] loop0: detected capacity change from 0 to 2048 [ 128.138570][ T6510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 128.338942][ T785] usb 2-1: config 0 has no interfaces? [ 128.373513][ T785] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 128.400293][ T785] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.414628][ T785] usb 2-1: Product: syz [ 128.536231][ T785] usb 2-1: Manufacturer: syz [ 128.541255][ T785] usb 2-1: SerialNumber: syz [ 128.584864][ T785] usb 2-1: config 0 descriptor?? [ 129.380806][ T6508] loop6: detected capacity change from 0 to 64 [ 129.395780][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 130.547554][ T6542] loop2: detected capacity change from 0 to 2048 [ 130.582584][ T6542] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 131.917492][ T8] usb 2-1: USB disconnect, device number 5 [ 132.527866][ T6577] loop1: detected capacity change from 0 to 2048 [ 132.602303][ T6577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.905396][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.911904][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.741466][ T6584] loop0: detected capacity change from 0 to 2048 [ 133.963595][ T6584] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 134.798321][ T6598] loop0: detected capacity change from 0 to 128 [ 135.033091][ T6596] loop3: detected capacity change from 0 to 32768 [ 135.782944][ T6605] tipc: Enabled bearer , priority 0 [ 135.822791][ T6605] syzkaller0: entered promiscuous mode [ 135.833692][ T6605] syzkaller0: entered allmulticast mode [ 135.898033][ T6605] tipc: Resetting bearer [ 135.922266][ T6602] tipc: Resetting bearer [ 135.979060][ T6602] tipc: Disabling bearer [ 136.012815][ T6613] netlink: 32 bytes leftover after parsing attributes in process `syz.3.221'. [ 137.359445][ T6630] mmap: syz.0.229 (6630) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 137.374762][ T6633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.228'. [ 137.511933][ T785] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 137.594272][ T6634] loop1: detected capacity change from 0 to 32768 [ 137.692031][ T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 138.203838][ T785] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 138.218858][ T785] usb 3-1: config 0 has no interface number 0 [ 138.234531][ T785] usb 3-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 138.338399][ T785] usb 3-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 138.371977][ T8] usb 4-1: config 0 has no interfaces? [ 138.384015][ T785] usb 3-1: config 0 interface 20 altsetting 119 has an invalid endpoint with address 0x0, skipping [ 138.401201][ T785] usb 3-1: config 0 interface 20 has no altsetting 0 [ 138.418649][ T785] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 138.445240][ T8] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 138.454688][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.482639][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.491982][ T785] usb 3-1: Product: syz [ 138.496154][ T785] usb 3-1: Manufacturer: syz [ 138.500750][ T785] usb 3-1: SerialNumber: syz [ 138.505565][ T8] usb 4-1: Product: syz [ 138.515986][ T8] usb 4-1: Manufacturer: syz [ 138.521517][ T8] usb 4-1: SerialNumber: syz [ 138.529133][ T785] usb 3-1: config 0 descriptor?? [ 138.538895][ T8] usb 4-1: config 0 descriptor?? [ 138.755113][ T785] keyspan 3-1:0.20: Keyspan 1 port adapter converter detected [ 138.818266][ T785] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 87 [ 138.874798][ T785] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 7 [ 138.901017][ T785] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 81 [ 138.914411][ T785] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 1 [ 138.922691][ T785] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 2 [ 138.930497][ T785] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 85 [ 138.938948][ T785] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 5 [ 138.949899][ T785] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 138.979243][ T785] usb 3-1: USB disconnect, device number 4 [ 139.039771][ T785] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 139.074695][ T785] keyspan 3-1:0.20: device disconnected [ 139.674417][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'. [ 141.109223][ T785] usb 4-1: USB disconnect, device number 3 [ 141.932009][ T786] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 142.054179][ T6661] block device autoloading is deprecated and will be removed. [ 142.124055][ T786] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 142.132401][ T786] usb 4-1: config 0 has no interface number 0 [ 142.172935][ T786] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 142.196583][ T786] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 142.221678][ T786] usb 4-1: config 0 interface 20 altsetting 119 has an invalid endpoint with address 0x0, skipping [ 142.232863][ T786] usb 4-1: config 0 interface 20 has no altsetting 0 [ 142.242829][ T786] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 142.251996][ T786] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.260394][ T786] usb 4-1: Product: syz [ 142.264852][ T786] usb 4-1: Manufacturer: syz [ 142.270278][ T786] usb 4-1: SerialNumber: syz [ 142.286939][ T786] usb 4-1: config 0 descriptor?? [ 142.502278][ T786] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 142.516382][ T786] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 142.530894][ T786] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 7 [ 142.547916][ T786] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 142.559598][ T786] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 142.568602][ T786] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 142.578568][ T786] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 142.603439][ T786] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 142.633336][ T786] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 142.703757][ T786] usb 4-1: USB disconnect, device number 4 [ 142.729161][ T786] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 142.763140][ T786] keyspan 4-1:0.20: device disconnected [ 142.793351][ T6679] loop1: detected capacity change from 0 to 2048 [ 142.912562][ T6679] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 143.210567][ T6683] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 144.523598][ T6700] netlink: 4 bytes leftover after parsing attributes in process `syz.2.249'. [ 144.838804][ T8] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.086252][ T8] usb 3-1: config 0 has no interfaces? [ 145.110287][ T8] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.175708][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.316058][ T8] usb 3-1: Product: syz [ 145.322554][ T8] usb 3-1: Manufacturer: syz [ 145.327197][ T8] usb 3-1: SerialNumber: syz [ 145.336785][ T8] usb 3-1: config 0 descriptor?? [ 145.342066][ T785] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 145.486531][ T6719] loop0: detected capacity change from 0 to 2048 [ 145.527496][ T6719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.586483][ T785] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 145.644738][ T785] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 145.701937][ T8] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 145.737662][ T785] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 145.787929][ T785] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 145.819046][ T785] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 145.859137][ T785] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 145.885308][ T785] usb 2-1: Product: syz [ 145.892998][ T785] usb 2-1: Manufacturer: syz [ 145.976462][ T8] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 145.989960][ T8] usb 4-1: config 0 has no interface number 0 [ 146.014621][ T8] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 146.058838][ T8] usb 4-1: config 0 interface 20 altsetting 119 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 146.091813][ T8] usb 4-1: config 0 interface 20 altsetting 119 has an invalid endpoint with address 0x0, skipping [ 146.173934][ T8] usb 4-1: config 0 interface 20 has no altsetting 0 [ 146.218219][ T8] usb 4-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 146.233072][ T785] usb 2-1: USB disconnect, device number 6 [ 146.243383][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.257164][ T8] usb 4-1: Product: syz [ 146.263701][ T8] usb 4-1: Manufacturer: syz [ 146.268298][ T8] usb 4-1: SerialNumber: syz [ 146.344917][ T8] usb 4-1: config 0 descriptor?? [ 147.652059][ T8] keyspan 4-1:0.20: Keyspan 1 port adapter converter detected [ 147.666502][ T8] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 87 [ 147.682283][ T8] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 7 [ 147.692931][ T8] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 81 [ 147.720257][ T8] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 1 [ 147.757227][ T8] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 2 [ 147.781459][ T8] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 85 [ 147.809935][ T8] keyspan 4-1:0.20: found no endpoint descriptor for endpoint 5 [ 147.837118][ T8] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 147.878813][ T8] usb 4-1: USB disconnect, device number 5 [ 147.904227][ T8] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 147.944805][ T8] keyspan 4-1:0.20: device disconnected [ 148.095959][ T785] usb 3-1: USB disconnect, device number 5 [ 148.728839][ T6739] loop2: detected capacity change from 0 to 2048 [ 148.768746][ T6739] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 148.878271][ T6744] netlink: 20 bytes leftover after parsing attributes in process `syz.1.264'. [ 149.677331][ T6740] ALSA: mixer_oss: invalid OSS volume '' [ 149.683382][ T6740] ALSA: mixer_oss: invalid OSS volume '+]OؓOGec9bx'ĮC' [ 149.691762][ T6740] ALSA: mixer_oss: invalid OSS volume '_*[bYcq~lr, priority 0 [ 161.256209][ T5832] usb 3-1: config 0 interface 20 has no altsetting 0 [ 161.277224][ T5832] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice= d.05 [ 161.286756][ T5832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.302285][ T5832] usb 3-1: Product: syz [ 161.306498][ T5832] usb 3-1: Manufacturer: syz [ 161.321317][ T5832] usb 3-1: SerialNumber: syz [ 161.327543][ T6840] syzkaller0: entered promiscuous mode [ 161.334381][ T5832] usb 3-1: config 0 descriptor?? [ 161.356625][ T6840] syzkaller0: entered allmulticast mode [ 161.387517][ T6838] tipc: Resetting bearer [ 161.415977][ T6837] tipc: Resetting bearer [ 161.522770][ T6837] tipc: Disabling bearer [ 161.542722][ T8] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.578811][ T5832] keyspan 3-1:0.20: Keyspan 1 port adapter converter detected [ 161.598127][ T5832] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 87 [ 161.622051][ T5832] keyspan 3-1:0.20: unsupported endpoint type 0 [ 161.643388][ T5832] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 81 [ 161.661982][ T5832] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 1 [ 161.672264][ T5832] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 2 [ 161.690147][ T5832] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 85 [ 161.701966][ T5832] keyspan 3-1:0.20: found no endpoint descriptor for endpoint 5 [ 161.721143][ T5832] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 161.744213][ T5832] usb 3-1: USB disconnect, device number 6 [ 161.761050][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 161.802422][ T5832] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 161.818586][ T8] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 161.832571][ T5832] keyspan 3-1:0.20: device disconnected [ 161.848506][ T8] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 161.881887][ T8] usb 2-1: Product: syz [ 161.889837][ T8] usb 2-1: Manufacturer: syz [ 161.901972][ T8] usb 2-1: SerialNumber: syz [ 161.921128][ T8] usb 2-1: config 0 descriptor?? [ 162.245470][ T5832] usb 2-1: USB disconnect, device number 7 [ 162.351996][ T6848] 9pnet_fd: Insufficient options for proto=fd [ 163.163359][ T6853] loop2: detected capacity change from 0 to 2048 [ 163.455639][ T6853] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.695909][ T6850] loop3: detected capacity change from 0 to 4096 [ 163.988576][ T6850] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #2: comm syz.3.299: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 164.141950][ T6850] EXT4-fs (loop3): get root inode failed [ 164.147619][ T6850] EXT4-fs (loop3): mount failed [ 167.729589][ T6889] 9pnet_fd: Insufficient options for proto=fd [ 168.747144][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.0.312'. [ 168.976766][ T6895] loop0: detected capacity change from 0 to 2048 [ 169.005060][ T6895] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 169.059632][ T6896] ALSA: mixer_oss: invalid OSS volume '' [ 169.091399][ T6896] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 169.228148][ T6896] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 169.408645][ T6896] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 169.610141][ T6896] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 169.758399][ T6896] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 169.766399][ T6896] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 169.774808][ T6896] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 169.781753][ T6899] loop3: detected capacity change from 0 to 4096 [ 169.783190][ T6896] ALSA: mixer_oss: invalid OSS volume '[' [ 169.783202][ T6896] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 169.783218][ T6896] ALSA: mixer_oss: invalid OSS volume '$7|YMepq' [ 175.968246][ T6955] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 175.976286][ T5853] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 175.985153][ T6955] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 175.994562][ T6955] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 176.003357][ T6955] ALSA: mixer_oss: invalid OSS volume '[' [ 176.009449][ T6955] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 176.017106][ T6955] ALSA: mixer_oss: invalid OSS volume '$, priority 0 [ 177.076022][ T6961] syzkaller0: entered promiscuous mode [ 177.081513][ T6961] syzkaller0: entered allmulticast mode [ 177.122566][ T6961] tipc: Resetting bearer [ 177.169765][ T6960] tipc: Resetting bearer [ 177.174653][ T6963] loop2: detected capacity change from 0 to 4096 [ 177.194919][ T6963] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #2: comm syz.2.339: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 177.242754][ T6963] EXT4-fs (loop2): get root inode failed [ 177.251627][ T6960] tipc: Disabling bearer [ 177.261720][ T6963] EXT4-fs (loop2): mount failed [ 178.317733][ T6973] loop3: detected capacity change from 0 to 2048 [ 178.348044][ T6973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.401407][ T6977] loop0: detected capacity change from 0 to 2048 [ 178.529268][ T6977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 178.564482][ T6979] netlink: 4 bytes leftover after parsing attributes in process `syz.2.341'. [ 178.992619][ T785] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 179.377023][ T785] usb 3-1: config 0 has no interfaces? [ 179.409949][ T785] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 179.439916][ T785] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.459722][ T785] usb 3-1: Product: syz [ 179.473351][ T785] usb 3-1: Manufacturer: syz [ 179.482170][ T785] usb 3-1: SerialNumber: syz [ 179.499450][ T785] usb 3-1: config 0 descriptor?? [ 179.590258][ T6986] loop0: detected capacity change from 0 to 2048 [ 179.648167][ T6986] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 179.660386][ T6987] ALSA: mixer_oss: invalid OSS volume '' [ 179.669469][ T6987] ALSA: mixer_oss: invalid OSS volume 'eQCȡ*qpAڜe T|K' [ 179.689953][ T6987] ALSA: mixer_oss: invalid OSS volume ':az]qeXfb]݆B.' [ 179.700982][ T6987] ALSA: mixer_oss: invalid OSS volume 'j|q⩃˚[w3^.ג' [ 179.727912][ T6987] ALSA: mixer_oss: invalid OSS volume '"P޸ۜo[8>7|YMepq' [ 179.751892][ T6987] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 179.775398][ T6987] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 179.791982][ T6987] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 179.808609][ T6987] ALSA: mixer_oss: invalid OSS volume '[' [ 179.820206][ T6987] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 179.835236][ T6987] ALSA: mixer_oss: invalid OSS volume '$7|YMepq' [ 182.546774][ T7009] ALSA: mixer_oss: invalid OSS volume 'wI׷#t\W,bP=&e' [ 182.554714][ T7009] ALSA: mixer_oss: invalid OSS volume ']za-!)ϻvCYps' [ 182.569678][ T7009] ALSA: mixer_oss: invalid OSS volume 'LE]Dxt݂OY3fk$T "' [ 182.578095][ T7009] ALSA: mixer_oss: invalid OSS volume '[' [ 182.585921][ T7009] ALSA: mixer_oss: invalid OSS volume '3A14IN+|\' [ 182.606583][ T7009] ALSA: mixer_oss: invalid OSS volume '$, priority 0 [ 197.652754][ T7140] syzkaller0: entered promiscuous mode [ 197.665256][ T7140] syzkaller0: entered allmulticast mode [ 197.692976][ T5853] usb 2-1: USB disconnect, device number 8 [ 197.694586][ T7140] tipc: Resetting bearer [ 197.733048][ T7139] tipc: Resetting bearer [ 197.774259][ T7139] tipc: Disabling bearer [ 197.791699][ T786] usb 3-1: USB disconnect, device number 9 [ 198.343179][ T7147] loop1: detected capacity change from 0 to 32768 [ 199.049419][ T7152] loop3: detected capacity change from 0 to 2048 [ 199.219404][ T7152] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.492883][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 199.525345][ T7157] loop0: detected capacity change from 0 to 2048 [ 199.646219][ T7157] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 200.177211][ T7163] ALSA: mixer_oss: invalid OSS volume '' [ 200.209031][ T7163] ALSA: mixer_oss: invalid OSS volume 'fU=' [ 200.874411][ T7172] tipc: Enabled bearer , priority 0 [ 200.885954][ T7172] syzkaller0: entered promiscuous mode [ 200.891649][ T7172] syzkaller0: entered allmulticast mode [ 200.932855][ T7172] tipc: Resetting bearer [ 200.948896][ T7171] tipc: Resetting bearer [ 200.978896][ T7171] tipc: Disabling bearer [ 200.990495][ T7174] loop1: detected capacity change from 0 to 16 [ 201.013269][ T7174] erofs: Unknown parameter 'vΡe1' [ 201.210891][ T7174] loop1: detected capacity change from 0 to 4096 [ 201.273758][ T7174] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #2: comm syz.1.403: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0) [ 201.351694][ T7174] EXT4-fs (loop1): get root inode failed [ 201.430725][ T7174] EXT4-fs (loop1): mount failed [ 202.062121][ T7182] loop3: detected capacity change from 0 to 32768 [ 202.678517][ C1] Unknown status report in ack skb [ 202.756623][ T7185] loop0: detected capacity change from 0 to 2048 [ 202.791409][ T7185] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 202.970494][ T7189] loop3: detected capacity change from 0 to 2048 [ 203.035273][ T7189] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.124652][ T7190] ALSA: mixer_oss: invalid OSS volume '' [ 203.130489][ T7190] ALSA: mixer_oss: invalid OSS volume 'fU=' [ 203.597788][ T7200] ptrace attach of "./syz-executor exec"[5787] was attempted by "./syz-executor exec"[7200] [ 204.077441][ T7206] tipc: Enabled bearer , priority 0 [ 204.096952][ T7206] syzkaller0: entered promiscuous mode [ 204.106477][ T7206] syzkaller0: entered allmulticast mode [ 204.125239][ T7206] tipc: Resetting bearer [ 204.136859][ T7205] tipc: Resetting bearer [ 204.197084][ T7205] tipc: Disabling bearer [ 205.257065][ T7215] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 205.430560][ T7214] loop3: detected capacity change from 0 to 32768 [ 205.463763][ T7216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.423'. [ 205.759653][ T7212] loop0: detected capacity change from 0 to 2048 [ 205.928657][ T7212] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.200911][ T7219] netlink: 4 bytes leftover after parsing attributes in process `syz.1.425'. [ 206.505251][ T7226] ALSA: mixer_oss: invalid OSS volume '' [ 206.511170][ T7226] ALSA: mixer_oss: invalid OSS volume 'fU=' [ 206.577208][ T7229] loop3: detected capacity change from 0 to 128 [ 206.582309][ T786] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 206.713856][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 206.820462][ T786] usb 3-1: config 0 has no interfaces? [ 207.202187][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 207.244449][ T8] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 207.277891][ T8] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 207.321185][ T8] usb 1-1: Product: syz [ 207.335820][ T8] usb 1-1: Manufacturer: syz [ 207.340804][ T8] usb 1-1: SerialNumber: syz [ 207.373944][ T8] usb 1-1: config 0 descriptor?? [ 207.613748][ T8] usb 1-1: USB disconnect, device number 8 [ 207.711295][ T786] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 207.720662][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.729494][ T786] usb 3-1: Product: syz [ 207.733792][ T786] usb 3-1: Manufacturer: syz [ 207.738403][ T786] usb 3-1: SerialNumber: syz [ 207.746410][ T786] usb 3-1: config 0 descriptor?? [ 208.060133][ T786] usb 3-1: USB disconnect, device number 10 [ 208.979755][ T7247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 209.014457][ T7248] ALSA: mixer_oss: invalid OSS volume '' [ 209.020291][ T7248] ALSA: mixer_oss: invalid OSS volume 'fU=' [ 209.049656][ T7252] loop0: detected capacity change from 0 to 2048 [ 209.082581][ T7253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.436'. [ 209.085360][ T7252] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.531100][ T8] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 210.878227][ T7269] loop2: detected capacity change from 0 to 2048 [ 210.896576][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 210.925395][ T8] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 210.951618][ T8] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 210.960218][ T7269] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 210.970607][ T8] usb 4-1: Product: syz [ 210.990391][ T8] usb 4-1: Manufacturer: syz [ 211.003574][ T8] usb 4-1: SerialNumber: syz [ 211.021479][ T8] usb 4-1: config 0 descriptor?? [ 211.263799][ T8] usb 4-1: USB disconnect, device number 9 [ 211.691981][ T5897] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 211.878098][ T7278] ALSA: mixer_oss: invalid OSS volume '' [ 211.884107][ T7278] ALSA: mixer_oss: invalid OSS volume 'fU=' [ 212.880766][ T5897] usb 3-1: config 0 has no interfaces? [ 212.881014][ T7285] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 212.891486][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 212.912127][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.925391][ T5897] usb 3-1: Product: syz [ 212.929540][ T5897] usb 3-1: Manufacturer: syz [ 212.940051][ T5897] usb 3-1: SerialNumber: syz [ 212.952104][ T5897] usb 3-1: config 0 descriptor?? [ 212.987358][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'. [ 213.173334][ T7293] loop1: detected capacity change from 0 to 128 [ 215.883729][ T786] usb 3-1: USB disconnect, device number 11 [ 216.226688][ T7308] ALSA: mixer_oss: invalid OSS volume '' [ 216.233505][ T7308] ALSA: mixer_oss: invalid OSS volume 'fU=' [ 217.789754][ T7337] ALSA: mixer_oss: invalid OSS volume '' [ 217.818229][ T7337] ALSA: mixer_oss: invalid OSS volume 'fU=' [ 218.062119][ T5897] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 218.345093][ T7346] loop0: detected capacity change from 0 to 2048 [ 218.361601][ T5897] usb 3-1: config 0 has no interfaces? [ 218.442732][ T7346] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 218.459979][ T5897] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 218.495462][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.529878][ T5897] usb 3-1: Product: syz [ 218.560332][ T5897] usb 3-1: Manufacturer: syz [ 218.574384][ T5897] usb 3-1: SerialNumber: syz [ 218.602387][ T5897] usb 3-1: config 0 descriptor?? [ 219.010156][ T7356] ALSA: mixer_oss: invalid OSS volume '' [ 219.029484][ T7356] ALSA: mixer_oss: invalid OSS volume 'fU=;ʸgԊ8\>Px' [ 219.202805][ T7360] loop6: detected capacity change from 0 to 64 [ 221.259319][ T8] usb 3-1: USB disconnect, device number 12 [ 221.415271][ T7378] loop3: detected capacity change from 0 to 2048 [ 221.468861][ T7378] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 221.502070][ T7380] ================================================================== [ 221.510150][ T7380] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x391/0x990 [ 221.517818][ T7380] Read of size 1 at addr ffff88805dbb2830 by task syz.0.485/7380 [ 221.525537][ T7380] [ 221.527871][ T7380] CPU: 0 PID: 7380 Comm: syz.0.485 Not tainted 6.6.96-syzkaller #0 [ 221.535764][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 221.545828][ T7380] Call Trace: [ 221.549113][ T7380] [ 221.552054][ T7380] dump_stack_lvl+0x16c/0x230 [ 221.556742][ T7380] ? __lock_acquire+0x7c80/0x7c80 [ 221.561774][ T7380] ? show_regs_print_info+0x20/0x20 [ 221.566984][ T7380] ? load_image+0x3b0/0x3b0 [ 221.571501][ T7380] ? __virt_addr_valid+0x469/0x540 [ 221.576626][ T7380] print_report+0xac/0x230 [ 221.581055][ T7380] ? rose_get_neigh+0x391/0x990 [ 221.585916][ T7380] kasan_report+0x117/0x150 [ 221.590433][ T7380] ? rose_get_neigh+0x391/0x990 [ 221.595301][ T7380] rose_get_neigh+0x391/0x990 [ 221.599990][ T7380] rose_connect+0x417/0x10a0 [ 221.604596][ T7380] ? aa_sk_perm+0x7fc/0x930 [ 221.609105][ T7380] ? rose_bind+0x7c0/0x7c0 [ 221.613530][ T7380] ? aa_af_perm+0x1f0/0x2b0 [ 221.618037][ T7380] ? tomoyo_socket_connect_permission+0x164/0x290 [ 221.624475][ T7380] ? __might_fault+0xaa/0x120 [ 221.629162][ T7380] ? bpf_lsm_socket_connect+0x9/0x10 [ 221.634458][ T7380] ? security_socket_connect+0x80/0xa0 [ 221.639910][ T7380] ? rose_bind+0x7c0/0x7c0 [ 221.644316][ T7380] __sys_connect+0x397/0x420 [ 221.648903][ T7380] ? __sys_connect_file+0x180/0x180 [ 221.654098][ T7380] __x64_sys_connect+0x7a/0x90 [ 221.658952][ T7380] do_syscall_64+0x55/0xb0 [ 221.663361][ T7380] ? clear_bhb_loop+0x40/0x90 [ 221.668026][ T7380] ? clear_bhb_loop+0x40/0x90 [ 221.672686][ T7380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.678566][ T7380] RIP: 0033:0x7f029cd8e929 [ 221.682972][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.702561][ T7380] RSP: 002b:00007f029db65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 221.710963][ T7380] RAX: ffffffffffffffda RBX: 00007f029cfb5fa0 RCX: 00007f029cd8e929 [ 221.718919][ T7380] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d [ 221.726875][ T7380] RBP: 00007f029ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 221.734828][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.742783][ T7380] R13: 0000000000000000 R14: 00007f029cfb5fa0 R15: 00007fff819dfed8 [ 221.750742][ T7380] [ 221.753748][ T7380] [ 221.756057][ T7380] Allocated by task 5892: [ 221.760368][ T7380] kasan_set_track+0x4e/0x70 [ 221.764950][ T7380] __kasan_kmalloc+0x8f/0xa0 [ 221.769532][ T7380] rose_add_node+0x23a/0xdd0 [ 221.774112][ T7380] rose_rt_ioctl+0xa42/0xfb0 [ 221.778691][ T7380] rose_ioctl+0x3cf/0x8b0 [ 221.783002][ T7380] sock_do_ioctl+0xd7/0x2f0 [ 221.787494][ T7380] sock_ioctl+0x623/0x7a0 [ 221.791810][ T7380] __se_sys_ioctl+0xfd/0x170 [ 221.796390][ T7380] do_syscall_64+0x55/0xb0 [ 221.800792][ T7380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.806671][ T7380] [ 221.808976][ T7380] Freed by task 7380: [ 221.812936][ T7380] kasan_set_track+0x4e/0x70 [ 221.817514][ T7380] kasan_save_free_info+0x2e/0x50 [ 221.822532][ T7380] ____kasan_slab_free+0x126/0x1e0 [ 221.827628][ T7380] slab_free_freelist_hook+0x130/0x1b0 [ 221.833069][ T7380] __kmem_cache_free+0xba/0x1f0 [ 221.837901][ T7380] rose_rt_device_down+0x66d/0x6c0 [ 221.843000][ T7380] rose_device_event+0x604/0x690 [ 221.847923][ T7380] notifier_call_chain+0x197/0x390 [ 221.853020][ T7380] __dev_notify_flags+0x18e/0x2e0 [ 221.858032][ T7380] dev_change_flags+0xe8/0x1a0 [ 221.862800][ T7380] dev_ifsioc+0x6a7/0xe20 [ 221.867128][ T7380] dev_ioctl+0x7e2/0x1170 [ 221.871443][ T7380] sock_do_ioctl+0x226/0x2f0 [ 221.876016][ T7380] sock_ioctl+0x623/0x7a0 [ 221.880330][ T7380] __se_sys_ioctl+0xfd/0x170 [ 221.884905][ T7380] do_syscall_64+0x55/0xb0 [ 221.889308][ T7380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 221.895186][ T7380] [ 221.897496][ T7380] The buggy address belongs to the object at ffff88805dbb2800 [ 221.897496][ T7380] which belongs to the cache kmalloc-512 of size 512 [ 221.911528][ T7380] The buggy address is located 48 bytes inside of [ 221.911528][ T7380] freed 512-byte region [ffff88805dbb2800, ffff88805dbb2a00) [ 221.925218][ T7380] [ 221.927524][ T7380] The buggy address belongs to the physical page: [ 221.933925][ T7380] page:ffffea000176ec00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88805dbb2000 pfn:0x5dbb0 [ 221.945364][ T7380] head:ffffea000176ec00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 221.954279][ T7380] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 221.962246][ T7380] page_type: 0xffffffff() [ 221.966558][ T7380] raw: 00fff00000000840 ffff888017841c80 ffffea00017b8b10 ffffea000076cd10 [ 221.975123][ T7380] raw: ffff88805dbb2000 000000000010000f 00000001ffffffff 0000000000000000 [ 221.983685][ T7380] page dumped because: kasan: bad access detected [ 221.990083][ T7380] page_owner tracks the page as allocated [ 221.995774][ T7380] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5884, tgid 5884 (syz.0.1), ts 71039221839, free_ts 15316349884 [ 222.018075][ T7380] post_alloc_hook+0x1cd/0x210 [ 222.022821][ T7380] get_page_from_freelist+0x195c/0x19f0 [ 222.028348][ T7380] __alloc_pages+0x1e3/0x460 [ 222.032925][ T7380] alloc_slab_page+0x4f/0x170 [ 222.037584][ T7380] new_slab+0x87/0x2e0 [ 222.041637][ T7380] ___slab_alloc+0xc6d/0x12f0 [ 222.046295][ T7380] __kmem_cache_alloc_node+0x1a2/0x260 [ 222.051733][ T7380] __kmalloc_node+0xa4/0x230 [ 222.056302][ T7380] memcg_alloc_slab_cgroups+0x87/0x130 [ 222.061747][ T7380] slab_post_alloc_hook+0xfc/0x4d0 [ 222.066840][ T7380] kmem_cache_alloc+0x11e/0x2e0 [ 222.071671][ T7380] __anon_vma_prepare+0x68/0x430 [ 222.076593][ T7380] handle_mm_fault+0x3cf1/0x4920 [ 222.081513][ T7380] do_user_addr_fault+0x738/0x12e0 [ 222.086606][ T7380] exc_page_fault+0x67/0x110 [ 222.091185][ T7380] asm_exc_page_fault+0x26/0x30 [ 222.096017][ T7380] page last free stack trace: [ 222.100665][ T7380] free_unref_page_prepare+0x7ce/0x8e0 [ 222.106106][ T7380] free_unref_page+0x32/0x2e0 [ 222.110765][ T7380] free_contig_range+0xa1/0x160 [ 222.115602][ T7380] destroy_args+0x87/0x770 [ 222.120000][ T7380] debug_vm_pgtable+0x3cc/0x410 [ 222.124837][ T7380] do_one_initcall+0x1fd/0x750 [ 222.129584][ T7380] do_initcall_level+0x137/0x1f0 [ 222.134501][ T7380] do_initcalls+0x69/0xd0 [ 222.138811][ T7380] kernel_init_freeable+0x3d2/0x570 [ 222.143988][ T7380] kernel_init+0x1d/0x1c0 [ 222.148298][ T7380] ret_from_fork+0x48/0x80 [ 222.152695][ T7380] ret_from_fork_asm+0x11/0x20 [ 222.157443][ T7380] [ 222.159746][ T7380] Memory state around the buggy address: [ 222.165354][ T7380] ffff88805dbb2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.173496][ T7380] ffff88805dbb2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 222.181545][ T7380] >ffff88805dbb2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.189586][ T7380] ^ [ 222.195196][ T7380] ffff88805dbb2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.203237][ T7380] ffff88805dbb2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 222.211276][ T7380] ================================================================== [ 222.219448][ T7380] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 222.226644][ T7380] CPU: 0 PID: 7380 Comm: syz.0.485 Not tainted 6.6.96-syzkaller #0 [ 222.234541][ T7380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 222.244593][ T7380] Call Trace: [ 222.247874][ T7380] [ 222.250807][ T7380] dump_stack_lvl+0x16c/0x230 [ 222.255495][ T7380] ? show_regs_print_info+0x20/0x20 [ 222.260702][ T7380] ? load_image+0x3b0/0x3b0 [ 222.265218][ T7380] panic+0x2c0/0x710 [ 222.269119][ T7380] ? bpf_jit_dump+0xd0/0xd0 [ 222.273632][ T7380] ? _raw_spin_unlock_irqrestore+0xa9/0x110 [ 222.279529][ T7380] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 222.285428][ T7380] ? _raw_spin_unlock+0x40/0x40 [ 222.290285][ T7380] ? print_memory_metadata+0x314/0x400 [ 222.295755][ T7380] ? rose_get_neigh+0x391/0x990 [ 222.300617][ T7380] check_panic_on_warn+0x84/0xa0 [ 222.305565][ T7380] ? rose_get_neigh+0x391/0x990 [ 222.310426][ T7380] end_report+0x6f/0x140 [ 222.314675][ T7380] kasan_report+0x128/0x150 [ 222.319193][ T7380] ? rose_get_neigh+0x391/0x990 [ 222.324058][ T7380] rose_get_neigh+0x391/0x990 [ 222.328743][ T7380] rose_connect+0x417/0x10a0 [ 222.333342][ T7380] ? aa_sk_perm+0x7fc/0x930 [ 222.337846][ T7380] ? rose_bind+0x7c0/0x7c0 [ 222.342267][ T7380] ? aa_af_perm+0x1f0/0x2b0 [ 222.346772][ T7380] ? tomoyo_socket_connect_permission+0x164/0x290 [ 222.353195][ T7380] ? __might_fault+0xaa/0x120 [ 222.357879][ T7380] ? bpf_lsm_socket_connect+0x9/0x10 [ 222.363178][ T7380] ? security_socket_connect+0x80/0xa0 [ 222.368643][ T7380] ? rose_bind+0x7c0/0x7c0 [ 222.373065][ T7380] __sys_connect+0x397/0x420 [ 222.377667][ T7380] ? __sys_connect_file+0x180/0x180 [ 222.382883][ T7380] __x64_sys_connect+0x7a/0x90 [ 222.387657][ T7380] do_syscall_64+0x55/0xb0 [ 222.392083][ T7380] ? clear_bhb_loop+0x40/0x90 [ 222.396763][ T7380] ? clear_bhb_loop+0x40/0x90 [ 222.401445][ T7380] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 222.407325][ T7380] RIP: 0033:0x7f029cd8e929 [ 222.411723][ T7380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.431312][ T7380] RSP: 002b:00007f029db65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 222.439706][ T7380] RAX: ffffffffffffffda RBX: 00007f029cfb5fa0 RCX: 00007f029cd8e929 [ 222.447661][ T7380] RDX: 000000000000001c RSI: 0000200000000040 RDI: 000000000000000d [ 222.455613][ T7380] RBP: 00007f029ce10b39 R08: 0000000000000000 R09: 0000000000000000 [ 222.463567][ T7380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.471521][ T7380] R13: 0000000000000000 R14: 00007f029cfb5fa0 R15: 00007fff819dfed8 [ 222.479481][ T7380] [ 222.482694][ T7380] Kernel Offset: disabled [ 222.486999][ T7380] Rebooting in 86400 seconds..